stevie-mayhew/silverstripe-svg

Release historycaution

The package has 16 releases over nearly 12 years, but none in the last 12 months; the latest release was about 15 months ago. This suggests slowing maintenance rather than abandonment on its own.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, which is a concrete maintenance concern for a dependency with no recent releases.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency but is not severe enough to make the release unfit by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its only action use is unpinned. That weakens build reproducibility while remaining a limited hygiene concern.